Explore the latest news and trends  

Sign up for our weekly security newsletter

Be the first to receive important updates on security


Crysis Ransomware Targeting Businesses in Australia and New Zealand

Trend Micro security researchers have found a ransomware targeting businesses in Australia and New Zealand. The ransom software, which has been named Crysis, was first identified during February this year. Currently, it's hitting targets in the two countries by employing brute force assaults with the aid of RDP (remote desktop protocol).

Crysis is chiefly spread via spam mails that contain Trojan-inflicted attachments whose files have dual extensions for obfuscating the file's true nature, alternatively web-links taking onto hijacked websites. The RDP in computers running Windows OS helps the systems establish connection with other computers on the network, while crooks have frequently exploited it for exfiltrating data, capturing information as well as adding infected PCs to an army of bots called botnet.

Security Expert Oliver explains that diversions within tools for remote access enforced in Windows facilitate end-users in accessing, processing as also using files (stored on the computers' local drives), and clipboards, printers, plugs as well as multimedia/play devices.

Given the situation, however, Crysis' controllers still seem to strive making themselves wholly unique; therefore, are implementing brute force assaults for compromising devices and blocking their access to the device-operators.

It isn't that Crysis alone as a ransomware has utilized brute force assaults leveraging RDP. Other ransomware groups too employ the technique accomplishing their aim a little less or little more. Softpedia.com posted this, September 19, 2016.

As already indicated Crysis scans files that it then encrypts on the host computer and other systems joined in a network. It's downloaded following a precursor conducting brute force assaults for determining the RDP's credentials. Meanwhile, it's rather tricky to clean up a device infected with Crysis since the ransomware drops Trojans onto accompanying routers and printers which could re-infect the device.

Conclusively, according to head of research intelligence analysis, Stephen Gates at NSFOCUS, it's important for everyone to know the items that require updating and also that updating applications and operating systems isn't mostly fully automated. Users require checking every week if updates are available for their software, OSs, plug-ins, web-browsers, anti-malware software, document readers and media players. Updating is necessary to avoid drive-by downloads otherwise exploiting the shortfall.

ยป SPAMfighter News - 9/23/2016

3 simple steps to update drivers on your Windows PCSlow PC? Optimize your Slow PC with SLOW-PCfighter!Email Cluttered with Spam? Free Spam Filter!

Dear Reader

We are happy to see you are reading our IT Security News.

We do believe, that the foundation for a good work environment starts with fast, secure and high performing computers. If you agree, then you should take a look at our Business Solutions to Spam Filter & Antivirus for even the latest version of Exchange Servers - your colleagues will appreciate it!

Go back to previous page